Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
File:                     4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json)
Hash identifier:          QLqd5PcL4Ub8Y+SkOUP93o8/N5od7aJGiWaN7L32alo=
Subject key identifier:   BF:76:98:9A:AE:7E:00:8D:43:DD:51:90:3B:8B:2F:33:97:98:D0:75
Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45
Certificate issuer:       /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
Certificate serial:       4B5987EF6DD91C5AA6396BBAE9D30D3D92D955D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft
Manifest number:          40
Signing time:             Thu 30 Jan 2025 11:21:59 +0000
Manifest this update:     Thu 30 Jan 2025 11:16:59 +0000
Manifest next update:     Sun 02 Feb 2025 21:32:59 +0000
Files and hashes:         1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: HSCUNLaKeqcd7Fit+HRGDE0GHJLW2sIkUfc8pivqrjg=)
                          2: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: KKjv4F3cfWuNdumj1egXTYmtkLVS7eKZKJXREEkUFJw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:59:87:ef:6d:d9:1c:5a:a6:39:6b:ba:e9:d3:0d:3d:92:d9:55:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745
        Validity
            Not Before: Jan 30 11:16:59 2025 GMT
            Not After : Feb  2 21:32:59 2025 GMT
        Subject: CN=BF76989AAE7E008D43DD51903B8B2F339798D075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:81:19:b6:59:c7:23:c9:4d:e1:46:a4:17:
                    38:8a:b7:2e:4d:ab:08:d9:d9:3a:f6:9d:95:4a:ee:
                    9a:4c:c2:43:a2:7b:5d:77:a0:87:3c:79:68:d5:c1:
                    47:fa:cf:33:7f:48:ff:3e:7b:34:ad:f7:26:0b:99:
                    51:2c:69:cc:7c:45:b9:b4:5f:4d:f9:c4:57:0b:55:
                    0f:4b:bd:6c:f6:be:a4:27:80:ee:b4:50:77:be:6a:
                    4c:bf:91:2d:b8:89:7e:d4:67:1e:2c:ad:00:6c:6c:
                    3c:b8:fa:10:41:9b:26:c7:e3:78:71:72:dd:f6:72:
                    5a:08:06:47:25:25:eb:c0:23:a1:49:e3:84:be:27:
                    17:9a:0a:37:e1:32:0e:f2:94:2a:0d:ec:72:50:55:
                    96:a5:f3:8c:80:65:cd:ac:fb:bd:e4:c6:18:40:50:
                    08:61:bc:d5:5a:4a:cc:13:25:ee:90:50:a9:84:6e:
                    cc:54:ed:80:1a:de:4d:8e:ec:4a:18:2f:cf:83:dc:
                    8f:46:ab:08:80:f6:bb:20:8a:94:99:c5:9e:73:58:
                    cd:b1:df:01:7c:86:14:8b:62:92:61:bf:96:ad:8d:
                    20:ac:48:ff:51:a2:08:18:e9:40:46:ae:fd:37:17:
                    35:22:90:aa:20:11:41:ab:21:01:85:36:d4:9f:25:
                    a5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:76:98:9A:AE:7E:00:8D:43:DD:51:90:3B:8B:2F:33:97:98:D0:75
            X509v3 Authority Key Identifier:
                keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c2:29:dd:6d:fb:3a:8d:3e:61:28:56:07:5b:c8:32:84:50:
         71:1b:30:5c:a5:f7:22:f9:05:3b:15:d1:d6:27:2f:c3:e4:2a:
         7b:7d:b4:7c:69:31:a2:2a:67:e0:5d:8d:ea:ca:ae:c8:b7:99:
         5e:72:39:e2:d2:3d:91:7a:5c:f8:af:05:3e:4a:23:56:2a:23:
         88:ff:94:e0:6f:fd:9a:e4:9f:67:b2:b5:73:73:37:d4:22:85:
         43:e1:b0:2d:f2:8b:5e:41:bc:ea:4b:9c:ee:9c:35:a4:d1:e8:
         1e:05:b6:9f:2c:24:86:d1:c5:8f:26:32:6a:b6:4e:6b:a7:99:
         10:04:93:05:07:0a:2b:a6:6d:38:14:dc:81:1e:07:14:ea:63:
         55:64:e0:39:79:a1:69:29:d9:2b:81:29:92:b0:92:bc:89:b6:
         d7:cb:97:b2:0e:7d:ea:94:bb:e6:de:50:c8:cf:c1:13:6c:f8:
         d8:27:b6:8a:8f:81:fa:15:0b:04:5d:7f:75:13:7d:72:c8:1c:
         83:7f:d5:8f:e2:a3:b4:61:2e:fc:a4:31:53:6a:88:76:65:4d:
         47:02:b2:44:5b:11:c9:37:8e:bd:a4:6f:41:0a:0d:46:b0:0f:
         44:e5:bf:9b:c6:4a:82:39:c4:04:87:71:65:6f:e8:a8:3c:48:
         58:17:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:46 2025 by rpki-client